Virus Database

Valentine.2332

Description Valentine.2332

This is a dangerous memory resident encrypted parasitic virus. Upon being executed, it searches for EXE files and writes itself to the end of the file. Then the virus hooks INT 21h, intercepts the execution of a EXE file, and infects them in the same manner.
On the 14th of February (Valentine's Day), the virus searches for the WINDOWS directory, searches for all files in that directory, deletes them, and displays the following messages:
Internal SCAN V2.01 McAfee Inc. (c) Copyright, 1994
Self-check failed!
WARNING! Windows.xxx Virus Found! This virus is known to be extremely
harmful to your health ! Remove virus (Y/Y) ?
Cleaning startedall
,Done ! Virus removed. Have a nice day and sleep well!
[A Happy Valentine To All Secret Lovers In The World]
[Greetinx From BlitzBit@:TwiLightZone!]

Check other viruses! Be aware! Use Antiviral Software

Mpei.4772

Description Mpei.4772

This is a relatively harmless memory resident encrypted parasitic virus. It hooks INT 21h, and writes itself to the end of COM and EXE files that are executed, created or opened. The virus uses anti-debugging tricks.
If Novell network is installed, the virus, depending on its counter, sends a message in Russian to all workstations in the net. On Fridays, this virus drops a program to the MBR of the hard drive that looks like a stealth boot virus, but without an infection routine, i.e., the code does all that other boot viruses do; installs itself into the memory, hooks INT 13h, and runs a stealth routine. The only exception in this code is that it does not contain an infection routine.
The virus contains the following text strings in Russian and English:
COMSPEC=
NAME: MPEI
Windows 95 MUST DIE !!!
Copyleft (c) Down'niloff Corp.,2000. All Lefts Preserved.

MPHTI Family

Description MPHTI Family

These are very dangerous viruses. They hit Boot sectors of the hard and floppy disks. The viruses save the old boot sector of the infected disk onto the next sector to the last one of the root directory. According to their internal counters the viruses can destroy information on the starting 8 tracks of all accessible disks. The viruses hooks INT 13h, also contain the text "1991,MFTI" on cyrillic coding (MFTI - Moscow college).

Home